Design/Logic Flaw

Pyramid Solutions' affected products, the Developer and DLL kits for EtherNet/IP Adapter and EtherNet/IP Scanner, are vulnerable to an out-of-bounds write, which may allow an unauthorized attacker to send a specially crafted packet that may result in a denial-of-service condition...

CVE-2022-1737 Pyramid Solutions EtherNet/IP Adapter Development Kit Out-of-bound Write

Pyramid Solutions' affected products, the Developer and DLL kits for EtherNet/IP Adapter and EtherNet/IP Scanner, are vulnerable to an out-of-bounds write, which may allow an unauthorized attacker to send a specially crafted packet that may result in a denial-of-service condition...

CVE-2022-1737

CVE-2022-1737 is an out-of-bounds write (CWE-787) affecting Pyramid Solutions’ EtherNet/IP Adapter/Scanner development and DLL kits and related DLL/SDKs. The vulnerability could let an unauthenticated attacker send a crafted packet over the EtherNet/IP network to cause denial-of-service. Affected...

CVE-2022-1737 Pyramid Solutions EtherNet/IP Adapter Development Kit Out-of-bound Write

Pyramid Solutions' affected products, the Developer and DLL kits for EtherNet/IP Adapter and EtherNet/IP Scanner, are vulnerable to an out-of-bounds write, which may allow an unauthorized attacker to send a specially crafted packet that may result in a denial-of-service condition...

CVE-2022-1737: Out-of-bounds Write

Pyramid Solutions' affected products, the Developer and DLL kits for EtherNet/IP Adapter and EtherNet/IP Scanner, are vulnerable to an out-of-bounds write, which may allow an unauthorized attacker to send a specially crafted packet that may result in a denial-of-service condition...

pyramid-immo.com Cross Site Scripting vulnerability OBB-2756081

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

EtherNet/IP Adapter 和 EtherNet/IP Scanner 缓冲区错误漏洞

The EtherNet/IP Adapter is a development kit and tool from Pyramid Solutions.EtherNet/IP Scanner is a scanner software. It provides I/O server and I/O client, message server and message client functionality, and an application programming interface. A buffer error vulnerability exists in the...

pyramid-online.net Cross Site Scripting vulnerability OBB-2371288

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Investment scams are on the rise

Preying on one of the most basic human flaws, investment scams and other get-rich-quick schemes are making up an ever larger portion of the online scammers cake. The number of victims, for now, is lower than the number of victims of fraudulent sales, identity fraud, and dating fraud, but the cost...

Malicious Package in pyramid-proportion

Version 1.0.5 of pyramid-proportion contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment. It's also...

GHSA-V6VV-HHQC-6HH2 Malicious Package in pyramid-proportion

Version 1.0.5 of pyramid-proportion contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment. It's also...

PT-2020-21508

Name of the Vulnerable Software and Affected Versions pyramid-proportion version 1.0.5 Description The issue concerns malicious code in version 1.0.5 of the pyramid-proportion package. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from for...

This Alleged Bitcoin Scam Looked a Lot Like a Pyramid Scheme

Five men face federal charges of bilking investors of $722 million by inviting them to buy shares in bitcoin mining pools...

Explained: like-farming

Like-farming, aka like-harvesting, is a method used by commercial parties and scammers alike to raise the popularity of a site or domain. The ultimate dream of every like-farmer is for his post to go viral by accumulating as many likes and shares as possible from all over the world. Like-farmers...

Pyramid Solutions BridgeWay Configuration Tool Detection (Windows SMB Login)

Detects the installed version of Pyramid Solutions BridgeWay Configuration Tool. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Secret Sister scam returns in time for Christmas

The festive season may be imminent, but it’s a Facebook Secret Sister not Santa you have to steer clear of. Secret Sister has been a mainstay of Yuletide scams since at least 2015, and has come back around once more. But what is it? Your office probably has a Secret Santa scheme in place. You dra...

When Phishing Starts from the Inside

A growing concern of security professionals is internal phishing attacks - phishing emails sent from one trusted user to another of the same organization. Internal phishing emails are used in multi-stage attacks in which an email account is owned either by controlling the users device with...

Sync Breeze Enterprise 9.9.16 - Buffer Overflow (SEH) Exploit

Exploit for windows platform in category remote exploits !/usr/bin/env python Exploit Title: Sync Breeze Enterprise v9.9.16 Remote SEH Buffer Overflow Date: 2017-08-25 Exploit Author: Nipun Jaswal & Anurag Srivastava Author Homepage: www.pyramidcyber.com Vendor Homepage: http://www.syncbreeze.com...

VX Search Enterprise 10.0.14 Buffer Overflow

!/usr/bin/env python Exploit Title : VX Search Enterprise v10.0.14 Remote Buffer Overflow CVE-2017-13708 Discovery by : Anurag Srivastava and Nipun Jaswal Credtis : Team Pyramid Email : [email protected] Website : www.pyramidcyber.com Discovery Date : 26/08/2017 Software Link :...

Disk Pulse Enterprise 9.9.16 - Buffer Overflow (SEH) Exploit

Exploit for windows platform in category remote exploits !/usr/bin/env python Exploit Title: Disk Pulse Enterprise 9.9.16 Remote SEH Buffer Overflow Date: 2017-08-25 Exploit Author: Nipun Jaswal & Anurag Srivastava Author Homepage: www.pyramidcyber.com Vendor Homepage: http://www.diskpulse.com...